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ABSTRACT 


PRCBLEM TO BE SCLVED: To collect log data showing the operation situations 
of al I St or es or vl ewl ng I nf orrrat i on in a cent er and to unl t ar I I y manage 
them In a dat a t r ansnl ssl on/ r ecept i on syst em const 1 1 ut ed of a center and 
mil 1 1 pi e St or es. 

SCLLrri CN: A host conput er 1 and plural terrrinal equipment 2 connected 
to the host conput er 1 t hr ough a comruni cat I on line 3 ar e I nst al I ed. Dat a 
are distributed to the terninal equi prrent 2 from the host conput er 1 and 
data is collected from the terninal equi pn^nt . I n t he host conput er 1, log 
data collected from all the terninal equipment 2 are received and they are 
made Into data bases and are unltarlly managed. Wien collected log data 
are analyzed and a log showing an abnormality Is received. It Is 
i nf or med t o a user . VI e™ ng I nf or mat I on showi ng whet her dat a dl st r I but ed 
from the host conput er 1 Is viewed or not Is collected. I n t he host 
conput er 1, the data are made I nt o a data base and data are unltarlly 
managed. 
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ABSTRACT 

PRCBLEM TO BE SCLVED: To recognize an alarm Issuing history of afire 
detector in a performance test by connecting a remote tester and to 
easily discrininate an abnormal fire sensor when a remote test is 
pert ormBd. 

SCLUTI CN: In this system capable of s™ chabi y connecting plural fire 
sensor s S connect ed t o det ect or I 1 nes L t o a f 1 r e r ecei ver R and a r emot e 
tester RC via a repeater Tvuthtest terninal, the plural fire sensors 
S ar e provi ded ™ t h a st or 1 ng means 14 to st or e r espect 1 ve al ar m 1 ssui ng 
data. The remote tester RC 1 s connected to the repeater T wi t h the test 
terninal by a detector a dat a f et chi ng means 1, fetches the alarm issuing 
dat a st or ed in t he st or 1 ng means 1 4 of t he f 1 r e sensor 8 by i nqui r 1 ng of an 
optional fire sensor S and dl spl ays t he alarm 1 ssui ng dat a of the fire 


sensor S of which inquiry is made by an alarm issuing dat a di spl ayi ng 
rreans 2. 

Fl RE ALARM SYSTEIVI PRCVI DED WTH REIVOTE TEST FUNCTI CM 
. . . PUBLI SHEQ 19980310) 

ABSTRACT 

PRCBLEIVI TO BE SOLVED: To recognize an alarm issuing history of afire 
detector in a performance test by connecting a remote tester and to 
easi i y discrininate an abnormal fire sensor \Mien a remote test is 
pert ornBd. . . 

. . . SCLLTTi CN: in this syst em capabi e of s™ chabi y connecting plural fire 
sensor s S connect ed t o det ect or i i nes L t o a f i r e r ecei ver R and a r emot e 
tester RC via a repeater Twthtest terninai, the plural fire sensors 
S ar e pr ovi ded v« t h a st or i ng means 14 to st or e r espect i ve al ar m 1 ssui ng 
dat a. The r emot e t est er RC i s connect ed to the r epeat er T wi t h t he t est 
terninai by a detector a dat a f et chi ng means 1, fetches the alarm issuing 
dat a st or ed i n t he st or i ng means 1 4 of t he f i r e sensor S by 1 nqui ring of an 
optional fire sensor S and di spi ays t he alarm i ssui ng dat a of the fire 
sensor S of \Mii ch inquiry is made by an alarm issuing dat a di spi ayi ng 
nBans 2. 
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Syst em for providing cooperative response to threat to personal corrputer 
perforrtB predefined action In response to alert state Indicating threat 
condition detected In domain devices by parsing log records of devices 

Pat ent Assi gnee: SPRi NY SPECTRUiVI LP ( SPRI - N) 
inventor: EVERSCN J; LAIVASTRES D; NORR S J W 
Patent Farii I y (1 patents, 1 countries) 
Pat ent Appi i cat i on 

Nunber Ki nd Dat e Nunber Ki nd Dat e Ujadat e 

US 7028338 B1 20060411 US 200123558 A 20011218 200630 B 

Pri ori ty Appi i cati ons (no. , l^i nd, date): US 200123558 A 20011218 

Pat ent Det al I s 

IMunber Ki nd Lan Pg Dwg Fi i i ng Not es 

US 7028338 B1 EN 10 4 

Al erti ng Abstract US B1 

NCVELTY - A detection server detects the occurrence of a threat condition 
in any of the devices of a domain by parsing the log records of the 
devices, stored in a log server. A profile server stores an alert states 
indicating the detected threat condition. Each the menbers queries the 
profile server to checl^ for an alert states and inpiements a predefined 
action in response to the alert state. 

DESCR PTi CN - i NDEPENDENT CLAi l\/B ar e ai so i nci uded f or t he f oi i owi ng: 

1. conputer programfor providing cooperative response; and 

2. nBt hod of providing cooperative response. 

USE - For pr ovi di ng cooper at i ve r esponse to a t hr eat eni ng act i vi t y e.g. 
denial of service attack, brute force password testing and probing in an 
attenpt to gain unauthorized access occurring with respect to networl<s 
devices such as server, mainframe, personal conput er , firewall, router, 
etc., in a particular domain. 

ADVANTAGE - Provides an automate cooperative response ability to all 
devices of a domai n on detecting threat /or other suspiciously activity to 
t he devi ces. 

DESCR PTI CN CF DRAW NGS - The f i gure shows the expl anatory drawi ng of 
syst em for providing cooperative response to threat of netwDrl< devices. 
12 domai n 


14 I og server 
16 det ect i on server 
18 prof i I e server 
20 net wor k devi ce 

Ti 1 1 e Terms/ 1 ndex Terms/ Addi t i onal Wbrds: SYSTEM CCXPERATE; RESPCND; 

THREAT; PERSCN; COVPUTER; PERFCRMOiNCE; PREDEFI NER ACTI CM; ALEFfT ; STATE 
; I m GATE; CCNDI TI CN; DETECT; DOVAI N; DEVI CE; PARSE; LOQ RECORD 

a ass Codes 

I nt er nat I onal Q assi f I cat I on ( + At t r I but es) 
I PC + Level Value Position Status Version 

QD6F- 001 1/34 A I F B 20060101 
US a assI f I cat I on, Issued: 72623, 713188, 7263 


Fl I e SegnBnt : EPI ; 
DWI a ass: T01 

IVfenual codes (EPI/S-X): T01-N02B1; T01-N02B2; T01-S03 

...for providinp cooperative response to threat to personal corrputer 
perforrrs predefined action in response to alert state indicating threat 
condition detected in dormi n devices by parsing i og records of devices 

Alerting Abstract ...log records of the devices, stored I n a I og server. 
A prof I I e server stores an alert st at es I ndl cat I ng t he det ect ed t hr eat 
condition. Each the mentjers queries the profile server to check for an 
alert states and Inplements a predefined action In response to the alert 
st at e. 

TI 1 1 e Ter rrs. . . / 1 ndex Ter rre/ Addl 1 1 onal Wbr ds: ALEFfT ; 
Crlglnal Publication Data by Authority 
Argent 1 na 

Assignee name & address: 
Q-iginal Abstracts: 

...at less than all npnt)ers of the domain. The syst em broadi y conprlses the 
domain; a log server; a detection server; and a profile server. The 
domain conprlses a logical grouping of mentjers having similar risk 
profiles. The detection server monitors and parses log and audit 
records generated by the rrenbers and copied to the log server. 
Wien t he detection server identifies threatening or other suspicious 

activity It sets an alert status In a security profile stored on the 
profile server. The menlDers periodically query the profile server for 
updates to the alert status and are thereby apprised of the alert. > 
a al rrs: 

...store the log records of the plurality of mBnt)ers;a detection server 
operable to access the log server and parse the stored log records In 
Identifying an occurrence of the threat condition In any of the plurality 
of menbers; anda profile server operable to store an alert status 
Indicative of Identification of the occurrence of the threat condition by 
the detection server, \Mier el n each of the plurality of mentjers Is operable 
to query the profile server In order to check an alert status, and. In 
response to an alert , to I npl ement a pre-defined action. 
Basic Derwent Wfeek: 200630 
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Oorrputer network rtDnitoring syst em has proxy I oghost analyzing log fil 
received frommjitiple resources operating on network 

Pat ent AssI gnee: KLAES A ( KLAE- 1 ) 
I nvent or : KLAES A 

Patent Farii I y (1 patents, 1 countries) 
Pat ent AppI I cat I on 


Nurrber Ki nd Dat e Nurrber Ki nd Dat e L^adat e 

US 20040117658 A1 20040617 US 2002413763 P 20020927 200445 B 
US 2003670298 A 20030926 

l^i nd, date): US 2002413763 P 20020927; US 


Pat ent D3t ai I s 

Nunt)er Ki nd Lan 

US 20040117658 A1 EN 


US 2002413763 


Al er t i ng Abst r act US A1 

NCVELTY - A proxy i ogiiost (160) analyzes mil ti pie log files received 
fromnultiple resource (170) operating on a network for deterrrining 
unexpected vol un^, unexpected patterns and unexpected types of log 
files, and generates events based on the analysis result. Anunitoring 
station generates alarm in response to the alert generated by analyzing 
t he event s. 

DESCR PTI CN - An I NDEPENDElvn" CLAI Mis al so 1 ncl uded f or the net wor k 
nx)ni t or 1 ng met hod. 

USE - For monitoring conput er network. 

ADVANTTAGE - All conponents of the network are effectively nunitored using 
log files at reduced cost, thereby security of conput er network is ensured. 

DESCR PTI CN CF DFIAW NGS - The figure shows the schematic vi ew of conput er 
network monitoring system 

TI 1 1 e Ter rns/ 1 ndex Ter ms/ Addi 1 1 onal Wbr ds: CdVPUTER; NETVOK; IVCNI TCR; 
SYSTEM LCQ Fl LE; RECEI VE; MJLTI PLE; RESCURCE; CPERATE 

a ass Oodes 

I nt er nat 1 onal G assi f 1 cat 1 on ( + At t r 1 but es) 
I PC + Level Value Position Status Version 


I-I04L-0012/ 24 

I-I04L-0012/26 A I F 

I-I04L- 0029/ 06 A I F 

I-I04L- 0029/ 08 A I F 

I-I04L-0012/24 C I F 

I-I04L-0012/26 C I F 

I-I04L- 0029/ 06 C I F 

I-I04L- 0029/ 08 C I F 

US a assi f 1 cat 1 on, I ssued: 


20060101 
20060101 
20060101 
20060101 
20060101 
20060101 
20060101 
20060101 
713201, 709224 


Fl I e Segment : EPI ; 
DWPI a ass: T01 

N/bnual Codes ( EPI / S- X) : T01 - N02B2B 

Al er 1 1 ng Abst r act ...NCVELTY - A proxy I oghost (160) analyzes rrtiltiple 
log files received frommiltiple resource (170) operating on a network for 
deterrrining unexpected volume, unexpected patterns and unexpected 
types of log files, and generates events based on the analysis result. 
A monitoring station generates alarm in response t o t he alert generated 
by analyzing the events. 

Or I gl nal Publ I cat I on Dat a by Aut hor 1 1 y 
Argent I na 

Assignee name & address: 
Olglnal Abstracts: 

...events from the proxy I oghost s, analyzes the events, and deter mnes the 
necessity of generating an alert and an associated alarm to notify a 
security manager of a possi bl e intrusion incident, or other anomaly, in 
t he network, 
a al rrs: 

Wiat 1 s cl al med i s: <b>1</b>. A moni t or i ng/ i nt r usi on det act i on syst em 
conprising: a central I oghost, at least one proxy I oghost in 
conminl cat 1 on ™th the central I oghost ; and at least one monitoring 
St at I on , wher el n t he pr oxy I oghost r ecei ves a pi ur al i t y of I og f 1 I es 
from a plurality of resources operating on a network, analyzes the log 
files for at least one of unexpected volume, unexpected patterns, or 
unexpected types of log files, and generates events in vi ew of such 
analysis , v\lierein the central I oghost Is operable to receive the 


events generated by the proxy I oghost and generate an alert upon an 
anal ysi s of t he event s, and wher ei n t he noni t or i ng st at i on is caused t o 
issue an alarm when the alert is generated. 
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Oonputer netvnrk protection rret hod e.g. for local area network, involves 
managing distribution of rrobl I e sensor agents in netvrork, in response to 
event data corresponding to occurrence of events 

Pat ent Assi gnee: LOCKHEED mm\ N OR NCCN CCRP ( LOCK) ; OLDHAM F E ( OLDH- 1 ) 

; OTT A E ( OTTA- i ) 
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AU 2003276862 Al EN Based on CPi patent WD 2004023714 

GB 2409784 A EN PCT Appi i cat i on WD 2003US27583 

Based on CPi patent WD 2004023714 
AU 2003276862 A8 EN Based on CPi patent WD 2004023714 

GB 2409784 B EN PCT Appi i cat i on WD 2003US27583 

Based on CPI patent WD 2004023714 

Al erti ng Abstract US Al 

NCVELTY - Nunloer of nx)bi i e sensor agents are provided in a conputer 
network, for detecting occurrence of events. The distribution of the nx)bi i e 
sensor agents i n t he network, is managed by a distribution manager (500), 
in response to the event data corresponding to occurrence of events 
received from the agents. 

DESCR PTi ON - I NDEPENDENT CLAi IVB ar e al so i nci uded f or t he f ol i owi ng: 


1. network protection conputer program! and 

2. conputer network protection server. 


USE - For protecting conputer network such as local area network (LAN) 
and wide area network (\AAN). 

ADVANTAGE - The need f or i nst ai I at i on of new appi i cat i ons and add! t i onai 
resources, for protecting the network, is eliminated. Also, the need for 
analysis of large amount of data related to an attack, is elininated. An 
increased level of protection against the attacks is provided by si npl e 
configuration, by \Mii ch attack detection rate is increased and false alarm 
i s r educed. 

DESCR PTi ON OF DRAW NGS - The figure shows the block diagram of the 
sensor distribution manager. 


500 distribution manager 
502 cont roi i er 
504 sensor server 
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i nt er nat i onai Q assi f i cat i on ( + At t r i but es) 
i PC + Levei Vai ue Position Status Version 


QD6F-0021/00 
GD6F-0021/00 
i-i04L- 0029/ 06 
i-l04L- 0029/ 06 
G06F-0021/00 
QD6F- 0021/00 
i-i04L- 0029/ 06 
i-i04L- 0029/ 06 


C i L B 


20060101 
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DWPi a ass: T01 

mnua\ codes (EPi/S-X): T01-N02B2B; T01-S03 


Qiginal Publication Data by Authority 
Argent i na 

Assignee name & address: 
Q-iginai Abstracts: 

...occurrences to a security server connected t o t tie protected networl^. Ttie 
security server processes t lie event data , assesses the current 
situation / risk status of the netvtork , and manages the distribution of 
mobile sensor agents i n t he network in response to the... 

...occurrences to a security server connected to the protected network. The 
security server processes the event data , assesses the current 
situation/ risk status of the network , and manages the distribution 
of mobile sensor agents 1 n t he network in response to the current status 
of t he net wor k. . . 
a ai rrs: 

. . . rrobl I e sensor agents being configured to detect event 

occur r ences; r ecei vi ng event data from one or rrore of said mobile sensor 

agents, said event data corresponding to detected event occurrences ; 

andmanagi ng, in response to said event data, the distribution of one or 

rrore of said mobile sensor agents in said conput er network. 

Basic Derwent Wfeek: 200426 
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Corrput er - vi r us generation detection apparatus for corrputer network, 
collects ir regular data representing possibility of generation of 
corrput er-vi r us in Internet, and decides virus generation based on irregular 
dat a 

Patent Assignee: TOBHI BA KK (TCKE) 

I nvent or : TAKAHASHI T 

Patent Farii I y (3 patents, 2 countries) 

Pat ent AppI i cat i on 


Nurrber Ki nd Dat e Nurrter Ki nd Dat e l^sdat e 

US 20030159064 A1 20030821 US 2003366568 A 20030214 200370 B 
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US 7334264 B2 20080219 US 2003366568 A 20030214 200816 E 

A 20020215; US 


Lan Pg Dwg Fi I i ng Not es 
EN 14 9 
JA 9 
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AI erti ng Abstract US Al 

NCVELTY - A msasur erTBnt unit (36) requests an error log from access 
logs stored in a access log nBmory (8) ttirougli error detector (7). Tlie 

measur emsnt unit analyzes the error log so as to deterrrine 
Irregular dat a represent i ng possibiiity of generation of conputer virus in 
internet (1). A deci si on unit (34) coiiects Irregular data, and decides 
whether conputer virus is generated based on coi i ect ed irreguiar data. 
DESCR PTi CN - i NDEPENDENT CLAi iVB ar e ai so i nci uded f or t he f oi i owi ng: 

1. conput er- vi rus generation detection method; and 

2. conput er progr am product for detecting generation of conput er - vi r us. 

USE - For detecting generation of corrput er virus in conputer netvwsrk such 
as internet or intranet, or conputer system such as personal conputer (PC) 
system or ni cr oconput er system 

AjDVANTTAGE - Enabi es detecting the generation of conputer virus accurateiy 
and r el I abl y, t her eby al I owi ng a sui t abl e count er measur e t o be t aken 
i mTBdi at el y before the damage rapidly enlarges. Thus security of conputer 
net wor l< i s i nproved. 

DESCR PTi CN CF DRAW NGS - The figure shows the b\ ock diagram of the 
conput er-vi rus generation detection apparatus. 

1 1 nt er net 

2 conpany i nt ranet 

3 conputer virus generation detection apparatus 
4, 6 fir ewai 1 

5 VWVserver 

7 error det ect or 

8 access 1 og memory 

36 error quantity measurement unit 

34 deci si on uni t 

35 notification unit 

Tl 1 1 e Terns/ 1 ndex Terms/ Addi t i onai Wbrds: CdVPUTER; VIRUS; GENERATE; DETECT 
; APPARATUS; NETWORK; CCLLECT; I RREGULAR; DATA; REPRESENT; POSSI 81 LI TY; 
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DWI a ass: T01 

IVfenual codes (EPI/S-X): T01-J20D; T01-N02B1A; T01-N02B2B; T01-S03 

Al er t i ng Abst r act . . . NCVELTY - A rtBasurerrent unit (36) requests an 
error log from access logs stored in a access log n^nxjry (8) through 
error detector (7). Tlie msasurerrent 0 unit analyzes the error log so 
as to deter nine irregular data representing possibility of generation 
of conputer virus in Internet (1). A deci si on unit (34) collects Irregular 
data, and decides whether conputer virus is generated based on collected 
irregular dat a. . . . 35 notification unit 

Q- 1 gl nal Publ I cat I on Dat a by Aut hor 1 1 y 

Argent i na 

/\ssi gnee name & address: 
Crl gl nal Abst r act s: 

. . . connect ed bet ween a f 1 r st conput er net wor k 1 n whi ch a conput er vi r us may 
generate and a second corrput er network or a conputer syst em as an 
object of security protection. I n t he apparatus, a... 

. . . vi r us is bei ng gener at ed on t he conput er net wor k 1 n accor dance wi t h t he 
irregular data. A notification unit notifies the second conputer 
network or the conputer syst em of generation of the conputer virus when the 
deci si on uni t . . . 

. . . connect ed bet ween a f 1 r st conput er net wor k 1 n whi ch a conput er vi r us may 
generate and a second corrput er network or a conputer syst em as an 
object of security protection. I n t he apparatus, a... 

. . . vi r us is bei ng gener at ed on t he conput er net wor k 1 n accor dance wi t h the 
irregular data. A notification unit notifies the second conputer 
network or the conputer syst em of generation of the conputer virus when the 
deci si on uni t . . . 
a al rrs: 

. . . \Miet her a conput er vi r us exi st s in t he ser ver 1 n accor dance ™ t h the 
comninl cat 1 on dat a; a notification unit configured to notify the conpany 
Intranet of the existence of the conputer virus when said decision unit 
deci des. . . 

Basic Derwent Wfeek: 200370 
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0013377410 - Drawing available 
\API ACC NQ 2003-467047/200344 
XRPX Acc No: N2003-371614 

^^nagerTBnt syst em of building e.g. condom nl um correlates and manages 
detection I nf or mat I on related to state in each area of building, and 


rmuntlng location Information of sensor 
Pat ent Assi gnee: ALLI ED TELESI 8 KK ( ALTE- N) ; 
I nvent or : SATO K; SATCH K 
Patent Farii I y (5 patents, 98 countries) 
Pat ent AppI 1 cat 1 on 

Nunber Ki nd Dat e Nunber 

US 20030058095 Al 20030327 US 2001998207 
J P 2003109152 A 20030411 J P 2001295552 
VVD 2003030123 Al 20030410 WD 2002JP4224 
US 6642843 B2 20031104 US 2001998207 


ALLI ED TERRACES KK ( ALTE- N) 


Ki nd Dat e 
A 20011203 
A 20010927 
A 20020426 
A 20011203 


Update 
200344 
200344 
200344 
200374 


AU 2002251555 A1 20030414 AU 2002251555 A 20020426 200460 E 


Pat ent Det ai I s 

Nurrber Ki nd Lan Pg Dwg Fi I i ng Not es 

US 20030058095 AI EN 17 14 
JP 2003109152 A JA 15 
WD 2003030123 AI JA 

Nat i onal Desi gnat ed St at es, Q i gi nal : AE AG AL AM AT AU AZ BA BB BG BR BY 
BZCACHCNCOCRCUCZDEDKDMDZECEEESFI GBGDGEGHGMHRHUID 
I L I N I S KE KG KP KR KZ LC LK LR LS LT LU LV IVA IVD M3 IVK MVJ MA/ IVK MZ NO 
NZ CM PH PL PT RO RU SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG UZ VN YU 
ZA ZM ZW 

Regi onal DesI gnat ed St at es, Q i gi nal : AT BE CH CY DE DK EA ES FI FR GB GH 

GM GR I E I T KE LS LU M3 MW IVZ NL a\ PT SD SE SL SZ TR TZ UG ZM ZW 
AU 2002251555 AI EN Based on CPI patent WD 2003030123 

AI erti ng Abstract US AI 

NCVELTY - A sensor controller (20) connected with sensors In each region 
of milt I pie occupancy building, detects the state in each area and sends 
the detected Information along with the nnunt i ng location information of 
the sensors to a management apparatus (10). The management apparatus 
correlates and manages the detection and location Information, to detect 
the occurrence of anomaly such as gas leaks or outsider's entry In mil 1 1 pi e 
occupancy bul I dl ng. 

DESCR PTI CN - I NDEPENDENT CLAI IVB ar e al so I ncl uded f or t he f ol I owl ng: 

1 . mil 1 1 pi e occupancy building management apparatus; 

2. sensor controller; and 

3. network device to \Mil ch sensors for detecting state of milt I pie 
occupancy building and management apparatus are connected. 

USE - For managing various areas of building such as condoni nl urn) 
apartment or office building, that are prone to occurrence of anomaly such 
as gas leaks or outsiders entry. 

ADVANTAGE - Nfekes It easy to grasp the details of anomaly, quickly and to 
correctly carry out count er measur es I n t he case of anomaly occurrence. 
Thus, the asset value of the building can be raised. 

DESCRI PTI CN CF DRAW NGS - The figure shows the block diagram of the 
management apparatus. 

10 N/bnagement apparatus 

20 Sensor cont rol I er 

Ti 1 1 e Ter rre/ 1 ndex Ter ms/ Addl 1 1 onal Wbr ds: M^NAGEIVENT; SYSTEM BUI LD 
CCRRELATE; MANAGE; DETECT; I NFCRM^TI CN; RELATED; STATE; AREA; MDUNTT; 
LOCATE; SENSE 

a ass Oodes 

International Q assi f I cat I on (IVbIn): GD8B- 025/ 00 

( Addl 1 1 onal / Secondar y) : GD6F- 01 7/ 60 
I nt er nat I onal O assI f I cat I on ( + At t r I but es) 
I PC + Level Value Position Status Version 

GD6Q-0050/00 A I L R 20060101 

GD8B-0025/00 A I L R 20060101 

GD8B-0025/01 A I L R 20060101 

GD8B-0025/04 A I L R 20060101 

GD8B-0025/10 A I R 20060101 

GD8B-0025/14 A I R 20060101 

GD8C-0019/00 A I F R 20060101 

I-I04L-0012/28 A I L R 20060101 

I-I04Q- 0009/ 00 A I L R 20060101 

GD6Q-0050/00 C I L R 20060101 

GD8B-0025/00 C I L R 20060101 

GD8B-0025/01 C I L R 20060101 

GD8B-0025/ 10 C I R 20060101 

GD8B-0025/14 C I R 20060101 

GD8C-0019/00 C I F R 20060101 

H04L-0012/28 C I L R 20060101 


I-I04Q-0009/00 C I L R 20060101 
US a assi f i cat i on, Issued: 340509, 340509, 340506, 340526, 340524, 
340825. 36, 340825. 49, 3403. 1 


Fi I e Segment : EPI ; 

DWI a ass: S02; TGI; W)5 

IVbnual Codes (EPI/S-X): S02- K08A; T01-J05A2; T01-N01D3; WD5-B01; WD5-B05; 
WD5- B08J 

Al er t i ng Abst r act ...nultiple occupancy building management apparatus; 
sensor controller; and network device to \Nhl ch sensors for detecting state 
of nul t i pi e occupancy building and management apparatus are connected 


Crlglnal Pubi i cat i on Data by Authority 
Argent i na 

Assignee name & address: 
Q-iginai Abstracts: 

...management syst em I s provided with a sensor control means located In 
each region of a rrui t i pi e occupancy building and a management apparatus 
connected to and able to conminlcate ™th the sensor... 
a ai ns: 

. . . I s: <b>1</ b>. A management syst em conpr I si ng sensor control means located 
In each region of a rrui t i pi e occupancy building and a management 
apparatus connected to and able to conminlcate ™th the sensor... 

...the sensors; said management apparatus receiving the sensor detection 
Information and sensor Identification Information sent from the sensor 
control means connected ™th said sensor, searching for said mounting 
I ocat I on I nf or mat I on f r om sal d st or age. . . 

. . . det erni nl ng means for analyzing said detection Information and 
determining the occurrence of an anomaly; and aiarm out put ting means for 
out put ting aiarrrs I n t he case \Miere an anomaly Is determined to have 
occurred by said det erni ning means; \Mier el n said det erni ning means analyze 
the detection inforrmtion and determine the occurrence of an anorrai y 
on the basis of prior detection history i nf orrmt i on. > 
Basic Derwent Wfeek: 200344 


14/5, K/ 8 (Item 6 f romf i I e: 350) 

Dl ALCX3( R) FI I e 350: Derwent Wl X 

(c) 2008 The Thomson Corporation. All rts. reserv. 

0013118753 - Drawing available 
V\PI ACC NQ 2003-200474/ 200319 
XRPX Acc No: N2003- 159676 

Prescription drug history inforrration providing method for insurance 
process, involves accessing prescription history inforrmtion stored in 
dat abase of phar maci st t er rri nal s f or pr ovi di ng dr ug 1 nf or mat 1 on of 
1 ndi vi dual 

Pat ent Assi gnee: 81 ENVENU T H ( Bl EN- 1 ) ; SADLER G R ( SADL- 1 ) 
I nvent or : Bl ENVENU T H; SADLER G R 
Patent Farii I y (1 patents, 1 countries) 
Pat ent /\ppl I cat I on 

Nunter Ki nd Dat e Nunber Kl nd Dat e Updat e 

US 20020188476 Al 20021212 US 2001879701 A 20010612 200319 B 

PrI orl ty AppI I cati ons (no. , kind, date): US 2001879701 A 20010612 

Pat ent Det ai I s 

Nunber Kl nd Lan Pg Qflg FI I I ng Not es 

US 20020188476 Al EN 11 5 

Al er t i ng Abst r act US Al 

NCVELTY - Drug history Information requests of Individual are received 
and transmitted to the client t erni nal s of pharmacy benefit managers over a 
comnuni cat I on network. The drug Information of the individual are generated 
by accessi ng a dat abase of st or ed pr escr I pt i on hi story i nf or mat I on, I n t he 


client terninals, in response t o t fie requests. 

DESCR PTi CN - I NIDEPENDEhJT CLAi IVB ar e i ncl uded f or t lie f ol I owi ng: 

Loonputer readable medi urn st or i ng instructions for controiiing conput er 
system to provide prescription history information; 

2. pr escr i pt i on history screening n^thod; and 

3. conput er system for providing prescription drug history information. 
USE - For insurance processes of an individual. 

ADVAMTAGE - The prescription history information provides the insurance 
with instantaneous information enabling to make an informed decision 
about the insurance related risks . 

DESCRI PTI CN CF DFIAW NGS - The f i gur e shovks t he schemat i c di agr am of t he 
conput i ng syst em envi r onment for providing prescription drug history 
information of individual to an insurer. 

Ti 1 1 e Ter rre/ 1 ndex Ter ms/ Addi 1 1 onal Wbr ds: PRESCR BED; DFIJQ HI STORY; 
I NFORIVATI CN; IVETHOD; I NBURANCE; PROCESS; ACCESS; STORAGE; DATABASE; 
TERM NAL; I ND VI DUAL 

a ass Oodes 

I nt er nat 1 onal Q assi f 1 cat 1 on ( + At t r 1 but es) 
I PC + Level Value Position Status Version 

GD6Q- 001 0/00 A I R 20060101 

GD6Q- 001 0/00 C I R 20060101 

US a assi f 1 cat 1 on, Issued: 7053 


Fi I e Segment : EPI ; 
DWPI a ass: SOS; T01 

IVbnual Codes (EPI/S-X): SOS- G02Q SOS- IVt T01-J06A; T01-N01A2; T01-S03 

Al er t i ng Abst r act . . . ADVAtvTTAGE - The pr escr 1 pt 1 on hi st or y 1 nf or mat 1 on 
provides the insurance with instantaneous information enabling to make an 
inforrred decision about the insurance related risks . 


Qiginal Pubi i cat i on Data by Authority 
Argent i na 

Assignee name & address: 
a ai nns: 

...request message; transnitting a plurality of individual history requests 
over a conrruni cat i on net W3rk to a plurality of client machi nes of 
pharn^cy benefit n^nagers, and receiving at least one prescription 
history response generated by accessing a database of stored prescription 
hi story i nf or mat 1 on. . . 
Basic Derwent Wfeek: 200319 


14/5,K/9 (Item? fromfile: 350) 
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0012299234 - Drawing available 
\API AGO m. 2002-240399/ 200229 
XRPX Acc INo: IN2002- 1 85559 

M>nitoring syst em for elderly person includes activity sensor and 

physiological sensor conbi ned to initiate warning of fall 

Patent Assignee: Bl LLCN IVI ( Bl LL- 1 ) ; C08GUER P ( CCSQ- 1 ) ; FAI^LDI O 

(FARA-I); G^GNADRE C ( G(\GN- 1 ) ; L' HER H ( LHER- I ) ; LLTTZLER P ( LLTTZ- I ) ; 

SENTTI EYS O ( SEISTT- I ) ; THUI LLI ER S ( THUI - 1 ) ; UNI V RENNES ( UYRE- N) ; 

VALETTE M ( VALE- 1 ) ; VI NESSE H ( VI NE- 1 ) 
I nvent or : Bl LLCN ^ CCSOJER P; FARALO Q GOiGNADRE C; G^GNARDE C; L HER H; 

L' HER H; LHER H; LLTTZLER P; SENTI EYS Q THUI LLI ER S; VALETTE M, VI NESSE H 
Patent Fani I y (9 patents, 94 countries) 
Pat ent AppI 1 cat 1 on 

Nunter Kind Date Nunter Kind Date Update 

VVD 200108S02S Al 2001 11 IS WD 2001FR137S A 2001 0S04 200229 B 
AU 2001S8498 A 20011120 AU 2001S8498 A 20010S04 200229 E 


us 20030153836 A1 20030814 
EP 1278457 B1 20051026 


FR 20005822 
EP 2001931805 
WD 2001 FR1 375 
WD 2001 FBI 375 
US 2003275357 
EP 2001931805 
WD 2001 FR1 375 
DE 60114400 
EP 2001931805 
WD 2001 FR1 375 
EP 2001931805 
DE 60114400 
EP 2001931805 
WD 2001 FBI 375 


20000505 200229 
20010504 200310 
20010504 

20010504 200355 
20030207 
20010504 200571 
20010504 

20010504 200580 

20010504 

20010504 

20010504 200634 
20010504 200651 
20010504 
20010504 


Ki nd Lan Pg Dwg Fi I i ng Not es 


Pri ori ty AppI i cati ons (no. , kind, date): FR 20005822 A 20000505 

Pat ent Det ai I ! 

Nunt)er 

WD 2001085025 

National Designated States, 
BZCACHCNCXDCRCUCZ 
i N i S J P KE KG KP KR KZ 
NZ PL PT RO RU SD SE SG 


GM GR i 
AU 200158498 
EP 1278457 AI FR 

Regional Designated States,C 
i E i T Li LT LU LV iVC iVK ^ 
US 20030153836 AI EN 
EP 1278457 B1 FR 

Regional Designated States,C 

I T LI LU M3 NL PT SE TR 
DE 60114400 E DE 


Cr 1 gl nal : 
DE DK DM 
LC LK LR 
SI SK SL 
Cr 1 gl nal : 
IWVIVZ NL 


ES 2252228 
DE 60114400 


T3 ES 
T2 DE 


AE AG AL AM AT AU AZ BA BB BG BR BY 
DZ EE ES FI GB GD GE GH GM HR HU I D I L 
LS LT LU LV M^ IVD M3 M< MM M/V IVK IVZ NO 
TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW 
AT BE CH CY DE DK EA ES FI FR GB GH 
. CA PT SD SE SL SZ TR TZ UG ZW 
Based on CPI patent WD 2001085025 
per AppI 1 cat 1 on WD 2001 FR1 375 
Based on CPI patent WD 2001085025 
AL AT BE CH CY DE DK ES FI FR GB GR 
) SE SI TR 
per AppI 1 cat 1 on WD 2001 FR1 375 
per AppI 1 cat 1 on WD 2001 FR1 375 
Based on CPI patent WD 2001085025 
AT BE CH CY DE DK ES FI FR GB GR I E 

Application EP 2001931805 
per AppI 1 cat 1 on WD 2001 FR1 375 
Based on CPI patent EP 1278457 
Based on CPI patent WD 2001085025 
AppI 1 cat 1 on EP 2001931805 
Based on CPI patent EP 1278457 
AppI 1 cat 1 on EP 2001931805 
per AppI 1 cat 1 on WD 2001 FR1 375 
Based on CPI patent EP 1278457 
Based on CPI patent WD 2001085025 

AI er t i ng Abst r act WD AI 

NCVELTY - The syst em f or detection of a possible fall by a person 
includes a device for detecting activity, or lack of activity, of the 
person. The si gni f 1 cance of t hi s i nf or mat 1 on is conf 1 r med by a f urt her 
detector sensing a physiological parameter, such as pulse, arterial 
pressure, breathing rate or t errper at ur e. Wien both of these sources of 
information indicate abnormal conditions, an alarm signal is generated. 

DESCR PTI CN - The syst em f or detection of a possible fall by a person 
i ncl udes a devi ce f or det ect i ng a pot ent i ai I y abnor mal si t uat i on. Thi s may 
be provided by one, or preferably two accel eron^t ers providing a signal 
1 ndi cat 1 ng t he act i vi t y, or I ack of activity, of the person. The 
si gni f 1 cance of t hi s i nf or mat 1 on is conf 1 r med by a f urt her det ect or sensi ng 
a physiological parameter, such as pulse, arterial pressure, breathing rate 
or tenperature. Wien both of these sources of information indicate abnormal 
conditions, an alarm signal is generated and this is transrritted to a 
remote position in order t o cal I for assistance. 

USE - Sunrmni ng help to an elderly person, someone ™th reduced mobi I 1 t y, 
or vjor ki ng ai one. 

ADVANTAGE - Provides alarm signal with reduced risk of false alarms 
because of dual det ect 1 on. 

DESCR PTI CN CF DRAW NGS - The dl agram sho\ws t he sequence in whi ch al arm 
si gnal s are val 1 dat ed. 

Ti 1 1 e TerriB/ 1 ndex Terms/ Addi 1 1 onal Wbrds: M3MI TCR; SYSTEM ELDERLY; PERSCN; 
ACri VE; SENSE; PHYSI CLOG CAL; CCIVBI NATI CN; I Nl Tl ATE; WPH NG ; FALL 


a ass Oodes 

International Q assi f I cat i on (IVbin): A61 B- 005/ 0205 
I nt er nat I onal Q assI f I cat I on ( + At t r i but es) 
I PC + Level Value Position Status Version 

A61B-0005/00 AN R 20060101 

A61 B- 0005/ 0205 A I F B 20060101 

A61 B- 0005/ 0205 A I R 20060101 

A61B-0005/ 11 A I L B 20060101 

A61B-0005/ 11 A I R 20060101 

QD8B-0021/04 A I L B 20060101 

QD8B-0021/04 A I R 20060101 

A61B-0005/00 C N R 20060101 

A61 B- 0005/ 0205 C I L B 20060101 

A61 B- 0005/ 0205 C I R 20060101 

A61B-0005/ 11 C I L B 20060101 

A61B-0005/ 11 C I R 20060101 

Q08B-0021/00 C I L B 20060101 

Q08B-0021/00 C I R 20060101 

US a assI f I cat I on, Issued: 600483 

Fl I e SegnBnt : EngPI ; EPI ; 
DWI a ass: 805; W)5; P31 

IVbnual Codes (EPI/S-X): S05-D01B1A; S05-D01B5; S05-D01C1; S05- D01 E; 
S05-QD2B2A; W)5- A 

Monitoring system for elderly person Includes activity sensor and 
physiological sensor corrbl ned t o I nl 1 1 at e warning of fall 

Alerting Abstract ...breathing rate or tenperature. Wien both of these 
sources of Information Indicate abnormal conditions, an alarm signal is 
generated. ... br eat hi ng rate or tenperature. Wien both of these sources of 
Information Indicate abnormal conditions, an alarm signal is generated 
and this is transmitted to a remote position in order to call... 


. . . DESCRI PTI CN OF DRAW NGB - The dl agram shows the sequence in whi ch al arm 
si gnal s ar e val I dat ed. 

Ti 1 1 e Terrre. . . / 1 ndex TermB/Addi 1 1 onal Wbrds: W\RN NG ; 

Crlginal Publication Data by Authority 

Argent I na 

Assignee name & address: 
Q-lginal Abstracts: 

The Invention concerns a device for detecting abnorrmi situations. In 
particular falls , I n a I 1 vl ng bei ng, conprlsing means generating an 
alarm signal representing an abnorrral situation, based on anafysl s of 
at least an activity Information and, at least In some cases, at 
I east a physi ol ogi cal i nf or mat 1 on. . . 

. . . The 1 nvent 1 on concer ns a devi ce f or det ect 1 ng abnor rral si t uat 1 ons, 1 n 
particular falls, i n a I I vl ng being, corrprlslnq means generating an 
alarm signal representing an abnorrral situation, based on anafysl s of 

at least an activity Inforrratlon and, at least in some cases, at 
least a physiological information... 

. . . The 1 nvent 1 on concer ns a devi ce f or det ect 1 ng abnor rral si t uat 1 ons, 1 n 
particular falls, in a living being, conprlsing means generating an alarm 
signal representing an abnorrral situation, based on analysis of at 
least an activity inforrratlon and, at least In sorre cases, at least 
a physi ol ogi cal 1 nf or mat 1 on. 


. . . de chutes, chez un suj et vl vant , conprenant des moyens de generation 
d' un signal d' alarrre r epr esent at I f d' une situation anormale, en fonction 
d' une analyse d' au moi ns une information d'activlte et , au moi ns dans 


certains cas, d' au moi ns une information ptiysi ol ogi que. 
a ai ns: 

. . . Devi ce f or det act 1 ng abnor mal si t uat i ons, part i cul ar I y f a! I s, i n a 
living subject, conprising at least one pressure sensor (36, 76) 
delivering a si gnai representing a pressure, and means (68) for 
processing at least one act 1 vi t y- r el at ed data element and at least one 
physi ol ogi cal . . . 

. . . 1 t em of information about act i vi t y; means for confirming said potential 
abnormal situation, supplied by at least one physiological sensor 
delivering at least one i t em of pliysi ol ogi cal i nf or mat i on. means for 
generating an alarm signal representative of the confirmed abnormal 
situation. Basic Der\went Wfeek: 200229 
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0011118716 - Drawing available 
\API ACC NQ 2002- 054893/ 200207 
XFPX Acc No: N2002- 040487 

Syst em rranagerrent support apparat us acqui res and not i f 1 es I og i nf orrmt i on 
to external remote maintenance syst em t hrough network interface when 
abnor mal i t y is det ect ed 

Patent Assignee: FUJITSU LTD ( FUl T) ; HI FIAI G ( HI FIA- 1 ) ; KCBUQ M ( KCBU- 1 ) 
I nvent or : HI RAI Q HI RAI Y; KCBUQ IVt V\ADA M 
Patent Fam I y (3 patents, 2 countries) 
Pat ent AppI 1 cat 1 on 

Nunt)er Ki nd Dat e Nunter Ki nd Dat e Updat e 

US 20010044841 AI 20011122 US 2001765632 A 20010122 200207 B 
JP 2001325124 A 20011122 J P 2000144659 A 20000517 200210 E 
US 7080285 B2 20060718 US 2001765632 A 20010122 200648 E 


Pat ent Det ai I s 

Nunt)er Ki nd Lan Pg Dwg Fl I 1 ng Not es 

US 20010044841 AI EN 29 12 

JP 2001325124 A JA 25 

AI erti ng Abstract US A1 

NCVELTY - A processor starts execution of an application \Mien power is 
turned CN. A moni t or i ng uni t cont r ol s t he power suppi y \Mien abnormality 
is detected 1 n t he processor. A notification unit acquires log 
information from the processor and notifies the acquired information 
through a netwDrl< interface to an external remote maintenance syst em when 
abnormality is detected. 

DESCR PTI CN - An I NDEPENDENT CLAI Mis al so 1 ncl uded f or syst em rranagement 
support npt hod. 

USE - For conput er system 

ADVANTAGE - Recognizes abnormality of syst em and clear up the cause of 
abnor mal 1 t y in a shor t t i nB by r ef er r i ng t he syst em I og. 

DESCR PTI CN CF DRAW NCS - The figure shows the explanatory vi ew of 
service structure using syst em management support apparatus. 

Ti 1 1 e Ter ns/ 1 ndex Ter ms/ Addi 1 1 onal Wbr ds: SYSTEM M^NAGEIVENT; SUPPCRT; 
APPARATUS; ACQUI RE; NOT! Fl CAT! CN ; LOQ I NFCRMi\TI CN; EXTERNAL; REMDTE; 
MM NTAI N; THROUGH; NETWORK; I NTERFACE; ABNCHVAL; DETECT 

a ass Codes 

International Q assi f 1 cat 1 on ( IVbi n) : GD6F-011/30 

(Addi ti onal /Secondary): G06F-001/00, G06F-011/22, G06F-013/00, GD6F-015/00 
I nt er nat 1 onal Q assi f 1 cat 1 on ( + At t r 1 but es) 
I PC + Level Value Position Status Version 

GD6F- 001 1/00 A I F B 20060101 

H04L-0012/24 A I R 20060101 

H04L-0012/24 C I R 20060101 

US a assi fl cat 1 on. Issued: 709223, 71436, 71427, 71448 


Fi I e SegrTBnt : EPI ; 
DWI a ass: T01 

IVfenual codes (EPI/S-X): T01-F05B3; T01-QD5A; T01-G11A; T01-L01; T01-ND1D; 
T01-N02A2B; T01-ISD2A3 

Syst em management support apparat us acqui res and not i f i es I og i nf orrrat i on 
to external remote maintenance syst em t hrough network interface when 
abnor rml i t y is det ect ed 

A! ert i ng Abst ract ... an appi i cat i on wiien power i s t ur ned CM A moni t or i ng 
unit controls the power supply vJnen abnormality is detected i n t he 
processor. A notification unit acquires log information from the 
processor and notifies the acquired information through a network 
interface to an external remote maintenance syst em when abnormality is 
det ect ed. 

Ti 1 1 e Terms. . . / 1 ndex Ter ms/ Addi 1 1 onal Wbrds: NOT! FI CAT! CN ; 
Qiginal Publication Data by Authority 

Argent i na 

Assignee narre & address: 
Cri gi nal Abst ract s: 

. . . t hen st ar t s an appI i cat i on when power of a conput er syst em 1 s t ur ned on. 
A trouble notification unit controls the power of t he conput er system 
and i nt egr a! I y nnni tors a t r oubl e of the st ar t pr ocessi ng uni t and a 
trouble during syst em oper at 1 on. The trouble notification unit, provided 
as a server managensnt support board, acquires log information stored in 
the start processing unit and notifies an external remote maintenance 
syst em of the log information as well as an alarm message trough a 
dedicated network interface v\lien the trouble notification unit detects 
the trouble of the start processing unit ( syst em down. . . 
...then starts an application when power of a conput er syst em is turned on. 
A trouble notification unit controls the power of the conput er system 
and i nt egr al I y moni t ors at r oubl e of t he st art process! ng uni t and a 
trouble during syst em oper at 1 on. The trouble notification unit, provided 
as a server management support board, acquires log information stored in 
the start processing unit and notifies an external remote maintenance 
syst em of the log information as well as an alarm message trough a 
dedicated network 1 nt erf ace when the trouble notification unit detects 
the trouble of the start processing unit ( syst em do\Mi) . 
a al rrs: 

. . . t roubl e of sal d st art processi ng uni t and a t roubl e dur 1 ng syst em 
operation; and a trouble notification unit whi ch acqui r e I og 1 nf or mat i on 
stored in said start processing unit, and notify an external remote 
maintenance syst em of the log information through a network interface if 
said t roubl e moni t or 1 ng uni t det ect s t he t roubl e of said start processing 
uni t . . . 

...at roubl e of sal d st art processi ng uni t and a t roubi e dur i ng syst em 
operat 1 on; a t roubl e notification unit whi ch acqui res log information 
stored in said start processing unit, and notifies an external remote 
mai nt enance syst em of t he I og 1 nf or mat 1 on t hr ough a f 1 r st net wor k 
interface, which is independent of a second network interface made 
available by said application, if said trouble monitoring unit detects 
the trouble of said start processing unit; anda power supply, independent 
of said syst em power supply, for powering said trouble notification 
uni t . > Basic Derwent W&ek: 200207 


14/5,K/11 (Item9 fromfile: 350) 

Dl ALOG( R) Fi I e 350: Derwent V\PI X 

(c) 2008 The Thomson Corporation. All rts. reserv. 
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XFPX Acc No: N2001- 093711 

Dat a t r ansrri 1 1 1 ng and r ecei vi ng syst em f or nul t i - st or e management , has host 
conput er to analyze log data from several terninal equipments and 
notify the user vrfien there is any abnormality 
Pat ent Assi gnee: PFU KK ( USAE) 


I nvent or : Kl TAMJRA K; KO Y; CMJRA M YAMMVDTO M 
Patent Farri I y (1 patents, 1 countries) 
Pat ent AppI i cat i on 

Nunt)er Ki nd Dat e Nunt)er Ki nd Dat e L^Ddat e 

J P 2000242864 A 20000908 JP 199939458 A 19990218 200114 B 

Pri ori ty AppI i cati ons (no. , kind, date): JP 199939458 A 19990218 

Pat ent Det ai I s 

Nuntier Ki nd Lan Pg Dwg Fi i i ng Not es 

JP 2000242864 A JA 6 6 

AI er t i ng Abst r act J P A 

NCVELTY - Data transnitting and receiving system lias a liost conput er 
connected wi t li several terrrinal equipments. Log data indicating t lie 
operation condition of t erni nal equipments, are collected by the host 
conput er . Host conput er anal yzes t he I og dat a and not I f I es t he user 
when there is any abnorrrallty . 

DESCR PTI CN - An I NDEPENDElvn" CLAI Mis ai so 1 ncl uded f or dat a t r ansni 1 1 1 ng 
and receiving procedure. 

USE - For managing operation condition of branch stores from 
headquart ers. 

ADVANfrAGE - As I og dat a f r om ai I t erni nal equipn^nts ar e col I ect ed, 
managenent is si npl 1 f 1 ed and in case of abnormality, quick recovery is 
possi bl e. 

DESCR PTI CN CF DRAW NGS - The figure shows the schematic block diagram of 
dat a t r ansni 1 1 1 ng and r ecei vi ng syst em 

Tl 1 1 e Ter rre/ 1 ndex Ter ms/ Addi 1 1 onal Wbr ds: DATA; TRANSIVI T; RECEI VE; SYSTEIVl 
MJLTI ; STCFIAGE; M^NAGEIVENT; HCST; CO/PUTER; LCG, TERM NAL; NOT! FI CATI CN 
; USER; ABNORMAL 

a ass Codes 

International Q assi f 1 cat 1 on ( IVbi n) : QD7G-001/14 

(Addi tl onal /Secondary): Q06F- 015/ 177, H04L-012/54, H04L-012/58 
Fi I e Segment : EPI ; 
DWPI a ass: T01; T05 

IVbnual Codes (EPI/S-X): T01-H07C; T05- L01 D 

Data t r ansrri 1 1 i ng and receiving syst em for rrulti -store rmnagerrent , has host 
corrputer to analyze log data from several t erni nal equiprrents and 
notify the user vrfien there is any abnormality 

AI er t i ng Abst r act ...NCVELTY - Dat a t r ansni 1 1 1 ng and r ecei vi ng syst em has 
a host conput er connected ™th several terrrinal equipn^nts. Log data 
indicating the operation condition of t erni nal equipments, are collected by 
the host conput er. Host conput er analyzes the log data and notifies 
the user when there is any abnormality . 

Title Terns. ../Index Ter me/ Additional Wbrds: NOTI FI CATI CN ; 
Cr i gi nal Publ 1 cat 1 on Dat a by Aut hor i t y 
Argent i na. . . 
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Rermte rmintenance system- stores infornntion detected by 
condition detector , in log f i I e and sends i t to terrrinal for 
rmi ntenance through publ i c ci rcui t 

Patent Assignee: M TSUBI SHI ELECTRI C CORP ( M TQ 

I nvent or : I W^KI Y; M^iEDA H 

Patent Farri I y (1 patents, 1 countries) 

Pat ent AppI 1 cat i on 

Nunber Kind Date Nunber Kind Date Upda 


JP 11110248 A 19990423 JP 1997265716 A 19970930 199927 B 

Pri ori ty AppI i cati ons (no. , kind, date): JP 1997265716 A 19970930 
Pat ent D3t ai I s 

Nuntier Ki nd Lan Pg Dwg Fi I i ng Not es 

JP 11110248 A JA 10 9 

Al ert i ng Abst ract JP A 

NQ/ELTY - A ternlnal (101) for maintenance is connected to several 
corrputers (105- 107) v/r\\ ch are connected in a LAN (104) ttirougli a pubi i c 
circuit (103). Ttie abnornnal condition of a conput er is detected by a 
del ect or ( 1 05A) . Tfie del ect ed i nf or mat i on i s st or ed i n a I og f i i e 
(105Q and is sent to the terninai for maintenance tfirougfi t fie pubi i c 
ci rcui t . 

USE - For rerrote maintenance of several corrputers connected tlirougli 
LAN. 

ADVANTAGE - A VM de range maintenance of conput er is performed since data 
extraction by abnormai notice of appi i cat i on is enabi ed. Dat a coi i ect i on 
during abnormai ity occurrence does not affect t fie operation of ot lier 
conput ers in LAN. Since running condition of conput er other than the 
abnormai conput ers is ai so recorded, when failure occurs, rectification of 
t he f ai i ur e is si npi i f i ed. DESCR PTi CN CP DRAW S) - The f 1 gur e shows t he 
bi ocl< diagram of remote maintenance system (101) Termnal; (103) Public 
circuit; (104) LAN; ( 105-107) Conputers; (105A) Detector; (105q) Log f i i e. 

Tl 1 1 e Terns/ i ndex Terms/ Addi t i onai Wbrds: REiVOTE; i\Ai NTAi N; SYSTEiVt STORAGE 
; i NFORI\ATi CN; DETECT; ABNCRIVAL; CCNDi Ti CN; LCG, Fi LE; SEND; TERIVI NAL; 
THROUGH; PUBLi Q Ci RCUi T 

a ass Oodes 

i nt er nat i onai Q assi f i cat i on (Main): GD6F-011/22 
( Addi t i onai / Secondar y) : QD6F- 01 3/ 00 

Fi i e Segment : EPi ; 
DWi a ass: T01 

l\fenuai codes (EPi/S-X): T01-GD2A; T01-H 

...stores Information detected by abnormai condition detector , In 
log file and sends It to terrrinal for rmlntenance through public circuit 

AI er t i ng Abst r act . . . NCVELTY - A terninai (101) for mai nt enance i s 
connected to several corrputers ( 105-107) which are connected in a LAN 
(104) through a public circuit (103). The abnorrral condition of a 
conput er is detected by a detector (105A). The detected information is 
stored in a log file (105G|| and is sent t o t he t er ni nal for maintenance 
t hrough t he pubi i c ci rcui t . . . 

...USE- For remote maintenance of several conputers connected through 
LAN. . . 

...ADVANTAGE - A wi de range maintenance of conput er is performed since data 
extraction by abnormal notice of application is enabled. Dat a col I ect i on 
during abnormality occurrence does not affect the operation of... 

Criginal Publication Data by Authority 

Argent I na. . . 
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Autorrated batch rranagement system 

Patent Assignee: WDRLDCCM I NC (M3IWN) 

I nvent or : BAKER J F; HARO STY R V; KI NDT G Q N/ACKEY E A; l\AI N A A; PI CKETT 
C C 


Patent Fani I y (1 patents, 1 countries) 
Pat ent AppI i cat i on 

Nuntier Ki nd Dat e Nuntier Ki nd Dat e Updat e 

US 5872970 A 19990216 US 1996672813 A 19960628 199914 B 

Pri ori ty AppI i cati ons (no. , kind, date): US 1996672813 A 19960628 

Pat ent Det ai I s 

Nunt)er Ki nd Lan Pg Dug Fi I i ng Not es 

US 5872970 A EN 12 5 

AI er t i ng Abst r act US A 

NCVELTY - Ttie i nt er act i ve out put f aci I i t y, i nt er act i ve syst em 
productivity facility and scliedui i ng syst em are utilized at each data 
cent er t o nx)ni t or , anal yze and fix bat ch j obs r esul 1 1 ng in except i ons and 
abnormal ends from client workstation. A notification unit notifies 
personnel concerning batch jobs resulting in exceptions and abnormal ends, 
if necessary. 

DESCR PTI CN - Several data centers (104a- 104c) f rom wor kst at i on conprises 
severai corrputers , each one for processing one or more batch jobs. The 
data center also conprises a scheduling unit to schedule, subni t and start 
the batch jobs. A j ob exception unit identifies exceptions and abnormal 
ends (ABENDS) for batch jobs. An interactive output facility ( I OF) enables 
viewing syst em log files and error messages on batch jobs. An interactive 
syst em product 1 vi t y f aci I 1 t y (I SPF) enabi es edi 1 1 ng bat ch j obs. A cl 1 ent 
wor kst at i on ( 1 02) is 1 nt er f aced wi t h dat a cent er s via st andar d dat a I 1 nks 
for monitoring batch jobs processed on conputers at each data center, 
resulting in exceptions and abnormal ends. The client workstation includes 
a gr aphi cal user i nt er f ace to ai I ow user to r et r 1 eve bat ch j obs r esul t i ng 
in exceptions and abnormal ends from job exception syst em on each data 
cent er . I NDEPENDENT CLAI l\^ ar e 1 ncl uded f or t he f ol I owi ng: 

1. a batch management syst em aut omat 1 ng method; 

2. aconputer progr am product . 

USE - For monitoring occurrence of exceptions and abnormal ends \Mii I e 
processing batch jobs on conput er systems. 

ADVANTAGE - Automates monitoring process thereby preventing errors. 

DESCR PTI CN CF DRAW NGS - The figure shows block diagram of systems 
ar chi t ect ur e. 

102 Q 1 ent workstation 

104a- 104c Data centers 


a ass Oodes 

I nt er nat 1 onal Q assi f 1 cat 1 on ( + At t r 1 but es) 
I PC + Level Value Position Status Version 

QD6F- 001 1/30 A I R 20060101 

QD6F- 001 1/32 AN R 20060101 

QD6F- 001 1/34 A I R 20060101 

Q06F-0015/16 A I R 20060101 

QD6F- 001 1/30 C I R 20060101 

QD6F- 001 1/32 C N R 20060101 

QD6F- 001 1/34 C I R 20060101 

QD6F-0015/16 C I R 20060101 

US a assi f 1 cat 1 on. Issued: 395671, 395672, 395182.13, 395185.1 

Fi I e Segment : EPI ; 
□API a ass: T01 

N/bnual Codes (EPI/S-X): T01-F02Q T01-Q05C; T01-l\/D2 

AI ert i ng Abst r act . . . anal yze and fix bat ch j obs resul t i ng in except i ons 
and abnormal ends from client workstation. A notification unit notifies 
personnel concerning batch jobs resulting in exceptions and abnormal ends, 
if necessary. DESCRI PTI CN - Several data centers (104a- 104c) from 
workstation conprises several corrputers , each one for processing one or 
more batch jobs. The data center also conprises a... 


Criginal Publication Data by Authority 


Argent i na 


Assignee name & address: 
Qiginal Abstracts: 

...and n^t hod for automating t tie process of monitoring bat cfi production 
jobs, being executed on a plurality of conput er systems, for abnormal 
ends (ABENDS) and exceptions, and for integrating a piurality of tools 
needed to monitor and fix... 

. . . The pr esent i nvent i on conpr 1 ses a conput er wor l<st at i on, oper at 1 ng in a 
client/server environment, connected to rrui t i pi e logical data centers via 
a St andard dat a conmini cat i ons I i nk to pr ovi de t he user wi t h a. . . 
a ai ns: 

...systeni corrpr i si ng: a pi ur al i t y of data centers, each of said data 
centers conpr i sing one or rrore conput ers , each of said corrputers 
processing one or more batch jobs, wherein each of said data centers 
further conpr i ses: a schedul 1 ng syst em t o schedul e, submit, and start said 
batch jobs; a job exception syst em to identify exceptions and abnormal 
ends (ABENIDs) for said batch jobs; an Interactive Cut put Facility ( I CF) 
to view syst em log files and error messages on said batch jobs; andan 
I nt er act i ve Syst em Pr oduct 1 vi t y Faci I 1 1 y (I SPF. . . 

. . . sai d pl ur al i t y of dat a cent ers vi a st andard dat a 11 nks, f or moni t or 1 ng 
said batch jobs, processed on said corrputers at each of said data 
centers, resulting in said exceptions and said ABENDS, \Mierei n said... 

... sai d bat ch j obs r esul 1 1 ng in sai d except 1 ons and sai d ABENDS f r om sai d 
client workstation; and notification means for notifying personnel 
concerning said batch jobs resulting in said exceptions and said ABENDs, 
if necessary. Basic Derwent Wfeek: 199914 
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Remot e rrai nt enance appt s. of vi deo conf erence syst em - not 1 f 1 es 

destination specified beforehand of major fault inforrration recorded by 

fault information recording device 

Patent Assignee: GANCN KK ( CANQ 

I nvent or : I TO K; I TO M 

Patent Farii I y (2 patents, 2 countries) 

Pat ent fipp\ 1 cat 1 on 

Nunber Kind Date Nunber Kind Date Update 

JP 7162825 A 19950623 JP 1993302909 A 19931202 199534 B 

US 5996094 A 19991130 US 1994352081 A 19941130 200003 E 

US 1997786910 A 19970122 

Pri orl ty AppI 1 cat 1 ons (no. , kind, date): JP 1993302909 A 19931202 

Pat ent Det ai I s 

Nunber Ki nd Lan Pg Dwg Fi I i ng Not es 

JP 7162825 A JA 5 4 

US 5996094 A EN Oont 1 nuat 1 on of appi 1 cat 1 on US 

1994352081 

Al ert 1 ng Abst ract JP A 

The appts. includes a trouble detection appts. (24) which detects the 
fault of a predetermined unit of a vi deo conference system A fault 
information recording device (26) records the fault information detected. 
If a large fault is detected, in addition to the recording of the detected 
f aul t a connect i on dest i nat i on is cal I ed aut omat 1 cal I y. 

The connection destination is registered in advance. Qherwse the 
connect i on dest i nat i on is cal I ed per i odi cal I y i.e. once i n a week. A 
notice device notifies the concerned fault information situation and 
destination specification. A same type of detection appts. and the 
recording device are provided at a connection control device (60) 
positioned between mil t i pl e points, when perforning video conference 


ADVANTAGE - nt enance history of conmini cat i on circuit, t erni nal 
equipnpnt, etc., is recorded and updated. Detects major abnormality 
i HTTBdi at ei y in video conference system 

Ti 1 1 e Ter rre/ i ndex Ter ms/ Addi t i onai Wbr ds: FEi\0"E; i\^i tsTTAi N; APPARATUS; 
Vi DEQ CX3MFER; SYSTEiVJ NOTI Fl CATI CN ; DESTi NATi CN; SPECi Fi EQ iVIMOR; 
FAULT; i NFORIVy\Ti CN; RECORD; DEVi CE 

a ass Codes 

i nt er nat i onai Q assi f i cat i on ( + At t r i but es) 
i PC + Levei Vai ue Position Status Version 


QD6F- 001 1/00 A 
i-i04N-0007/ 15 A 
QD6F- 001 1/00 C 
i-l04N-0007/ 15 C 
US a assi f i cat i on. 


R 20060101 
F R 20060101 
R 20060101 
F R 20060101 
ssued: 71457 


Fi i e SegnBnt : EPi ; 
DWPi a ass: WD2 

iVfenuai codes ( EPi / S- X) : W)2- F04A5; WD2- F08A 

... notifies dest 1 nat 1 on spec! f 1 ed bet orehand of rraj or fault Inforrmtlon 
recorded by fault Inforrratlon recording device 

Alerting Abstract ...advance. Qfiervuse t fie connection destination is 
cal I ed per i odi cai i y i.e. once i n a \weei<. A not I ce devi ce not I f I es t fie 
concerned fauit information situation and destination specification. A same 
type of detection appts. and... 

...ADVANTAGE - iVbi nt enance history of comnini cat i on circuit, t erni nai 
equipn^nt, etc., is recorded and updated. Detects major abnorrmllty 
I mredi at ei y in video conference system 

TItl e Terns. . ./i ndex Terms/ Addi ti onai Wbrds: NOTI FI CATI CN ; 
Q- 1 gl nal Publ I cat I on Dat a by Aut hor 1 1 y 
Argent I na 

Assignee name & address: 
Criginal Abstracts: 

...on t lie fauit information recording unit 26 and aut omat i cai i y cai i t fie 
pr er egi st er ed service office to notify Its fauit conditions i n t fie case 
of the heavy fauit \«hi ch may hinder the television conference... 

...unit 26 aut omat i cai i y cai i s t he r egi st er ed ser vi ce of f i ce per i odi cai i y, 
e.g., once a weei^, to notify the fauit information recorded after the 
previous cai i . Wien mailing the television conference bet\ween three or rrore 

points , the rrultl - point connection control unit 60 is also 
pr ovi ded vu t h a f aul t det ect 1 ng uni t and a f aul t 1 nf or mat 1 on r ecor di ng 
uni t . 
a al rrs: 

...t erni nal unit \«hi ch can conmini cat e audio and image information with 
other conmini cat 1 ons t er ni nal s via at least one 1 nt er connect or , said 
cormuni cat I ons terrrinal unit conprising: a detector, for detecting a 
mal f unct 1 on of sal d conmini cat 1 ons t er ni nal uni t ; and a pr ocessor . . . 
Basic Derwent W&ek: 199534 
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Aut orrnt I c t erni nat I on or resurrpt I on of backup copy sessi ons In dat a 
pr ocessi ng syst em - i nvol ves ent er I ng st at us I ndi cat I on of successf ul 
corrpl et I on of backup copy sessI on vu t hi n dat a pr ocessi ng syst em and 
per I odi cal I y r evi evu ng i ndl cat I ons vu t hi n act I vl t y t abl e to det er ni ne 
st at us of backup copy sessI on 


Pat ent Assi gnee: I NT BUSI NESS IVACHI NES CORP ( I BM3) 


I nvent or : EASTR DGE L E; KERN R F; M CKA W F; 
Patent Fam I y (4 patents, 3 count rjes) 


Pat ent 
Nunt)er 
US 5241668 
EP 566965 
EP 566965 
US RE37038 


Ki nd Dat e 
A 19930831 
A2 19931027 
A3 19950308 
E 20010130 


M KKELSEN C W RAIL I FF J M 


AppI i cat i on 
Nunber 

US 1992871363 
EP 1993105990 
EP 1993105990 
US 1992871363 
US 1995521600 


I Date 
19920420 
19930413 
19930413 
19920420 
19950831 


Update 
199336 
199343 
199542 
200108 


US 1992871363 A 19920420; US 


Pat ent Det ai I s 

Nunt)er Ki nd Lan Pg Dwg Fi I i ng Not es 

US 5241668 A EN 13 7 

EP 566965 A2 EN 14 7 

Regi onal Desi gnat ed St at es, Q i gi nal : DE FR GB 

EP 566965 A3 EN 

US RE37038 E EN 
1992871363 


Criginal reissued appi i cat i on US 
Rei ssue of pat ent 


US 5241668 


AI er t i ng Abst r act US A 

The met hod i nvoi ves ent er i ng a st at us i ndi cat ion i nt o act i vi t y t abi es 
associated vu t h storage subsystems and devices within a data processing 
system in response to initiation of a bacl<up copy session. Status 
indications are then entered upon successf ui conpi et i on of a bacl^up copy 
sessi on vu t hi n t he dat a pr ocessi ng syst em The i ndi cat i ons \m' t hi n the 
activity tabies are reviewed to deterrrine the status of a bacl^up copy 
session upon restarting a resource manager, abnorrmi terni nation of a 
bacl^up copy prograni or an operating syst em i ni t i al program ioad. if a 
bacl<up copy session has been initiated but not corrpleted, the backup copy 
session is then terminated. The indications within the activity tables are 
ai so revie\wed to deter nine the status of a bacl<up copy session if a reset 
notification is raised by a storage subsystem The trades extends which 
ar e act i ve f or a voi ume associ at ed wi t h a par t i cui ar sessi on i dent i f i cat i on 
are deterni ned. 

Aconparison is then made between the trades extends \Mii ch are active and 
the voi ume and extent information associated wth a physical session 
identification, if a match exists bet v\een the trades extends which are 
active and the volume and extent inforiTBtlon associated wi t h a physical 
session identification, the backup copy session resumes. If a match does 
not exist, the backup copy session is terni nated. 

ADVANTAGE - Provides copying of records in external storage concurrent 
with dramatically shortened suspension of data processing system 
appi 1 cat 1 on execut 1 on occasi oned by copyi ng 

Ti t i e Ter rre/ 1 ndex Ter ms/ Addi 1 1 onal Wbr ds: AUTCJVATI Q TERM NATE; RESUIVE; 
CCPY; SESSI CN; DATA; PROCESS; SYSTEM ENTER; STATUS; I NDI CATE; SUCCESS; 
COMPLETE; PER CD; ACTI VE; TABLE; DETERM NE 

a ass Oodes 

I nt er nat i onal G assi f 1 cat 1 on ( + At t r 1 but es) 
I PC + Level Value Position Status Version 


QD6F-0011/ 14 
QD6F-0012/00 A 
QD6F- 001 1/14 C 
QD6F-0012/00 C 
US a assi f 1 cat 1 on. 


20060101 
20060101 
20060101 
20060101 
I ssued: 395575, 395425, 395600 


Fi I e Segment : EPI ; 
DVV>I a ass: T01 

N/bnual Codes (EPI/S-X): T01-F05B; TOI-HOIA 

Alerting Abstract ... conpi et i on of a backup copy session within the data 
processing system The Indications wi t hi n t he activity tables are 
reviewed to deternrine the status of a backup copy session upon restarting 
a resource manager, abnormal termination of a backup copy program! or an 
operating syst em i ni 1 1 al program load. If a... 


...are also reviewed to deter nine the status of a backup copy session if a 
reset notification is raised by a storage subsystem Tfie traci<s extends 
whi cii ar e act i ve f or a voi unB. . . 

Q- i gi nai Pubi i cat i on I3at a by Aut hor i t y 

Argent i na 

Assignee name & address: 
Q-iginai Abstracts: 

. . . mii t i pi e bacl<up copy sessi on, \Mier e act i vi t y t abi es ar e associ at ed viih 
apiuraiity of storage subsystems and devices . A st at us indication is 
ent er ed i nt o sai d t abi es upon i ni t i at i on of a bacl^up copy sessi on. . . 

...but not conpi et ed, it is t erni nat ed. Said status indications are ai so 
reviewed if a reset notification is raised by a storage subsystem if a 
match exists between the trades extents which are active and the... 

...system for aut omat i cai i y t erni nat i ng or resurring backup copy sessions 
after an abnormal interrupt or reset notification occurrence during a 
backup copy process. A status indication is entered into activity tables 
associ at ed vu t h a pi ur ai 1 1 y of st or age subsyst ems and devi ces vu t hi n. . . 

. . . conpi et 1 on of a backup copy sessi on wi t hi n t he dat a pr ocessi ng syst em 
The indications wthin the activity tables are reviewed to deter nine 
the status of a bacltup copy session upon restarting a resource 
manager, abnorrmi term nat ion of a backup copy program or an operating 
syst em 1 ni 1 1 ai program load. If a backup copy sessi on has been initiated 
but not conpi et ed. . . 

...are also reviewed to deter nine the status of a backup copy session if a 
reset notification is raised by a storage subsystem The tracks extents 
whi ch ar e act 1 ve f or a vol ume associ at ed wi t h a part 1 cul ar sessi on 
i dent 1 f 1 cat 1 on ar e det er ni ned. A. . . 
Qairrs: Basic Derwent Wfeek: 199336 
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Coordinated vehicular ntii t i - vari abi e controi systemvuth data highway - 
responds to inputs from engine parts and comrmnds fromfuei injectors and 
generate pseudo-si gnal when abnorrmi data is received 

Patent Assignee: HITACHI LTD ( HI TA) 
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Date 
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Pr i or i t y /\ppl i cat i ons (no., kind, date): JP 198963746 A 19890317 
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Nunber Ki nd Lan Pg Dwg Fi I i ng Not es 

EP 388107 A EN 

Regional Desi gnat ed St at es, Q i gi nai : DE GB 

EP 388107 A3 EN 

EP 388107 81 EN 59 60 

Regional Desi gnat ed St at es, a i gi nai : DE GB 

US 5369581 A EN 40 60 Cont 1 nuat i on of appi 1 cat i on US 


Oont i nuat i on of appi i cat i on US 
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DE 69014357 E DE Application BP 1990302584 

Based on CPI patent EP 388107 

Al erti np Abstract EP A 

The engine controller (50) responds to signals from e.g. tfirottle and 
brake pedal position sensors (51, 52) and an intake air f I o\wmBt er (55) with 
comrands for individual cylinder fuel injectors (53) and sparking plugs, 
a her controllers (56, 59, 61, 63, 64) are associated with the throttle 
valve (57), knock detectors (60), crankshaft torque sensors (62), gearbox 
and suspension actuators (65). 

These controllers together v«th diagnostic, memory and display 
controllers (67-69) are interconnected by the data highway (10), with 
provision for generation of a pseudosi gnal when seriously abnormal data are 
det ect ed. 

ADVANTTAGE - □ st r 1 but ed processing syst em ensur es rapid co-operation 
among i nt er rel at ed cont r ol I er s wi t h si gnal or dat a pr 1 or 1 t y assi gnment . 

Equivalent Al er t i ng Abst r act USA 

The vehicle control apparatus includes first and second adjusters for 
adjusting first and second controlled parameters of a vehi cl e, 
respectively. It also has first and second controls, connected to the first 
and second adjusters, for controlling the first and second adjusters, 
respectively. A si gnal comninl cat 1 on path interconnects the first and 
second cont rol s and 

transferring device transfers a signal representative of a condition to 
be controlled determined by the first control t o t he second control 
devi ce over t he connuni cat 1 on pat h. 

The first control execut es a processi ng f or cal cul at 1 ng t he f 1 rst 
controlled parameter on the basis of data supplied, judges, on the basis of 
the thus calculated first controlled parameter, whether or not the second 
control device has to operate in cooperation ™th the first control, and 
produces an output signal to the conmini cat 1 on path, if the cooperative 
operation is required. The second control executes a processing for 
calculating the second controlled parameter in response t o t he output 
signal produced by the first control. The first and second adjusting 
device control the first and second controlled parameters associated 
therewith si mil t aneousi y in synchr oni sm and in accordance ™th the 
processing results of the respective control. 

USE - Esp. wi t h a vehi cl e provi ded vu t h at I east t wo corrput ers . 
(ATF 1 n week 9502/ Ftepri nt ed in week 9515) 
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F R 20060101 
L R 20060101 
L R 20060101 
L R 20060101 
L R 20060101 
L R 20060101 
L R 20060101 
L R 20060101 

J R 20060101 
L R 20060101 

ssued: 364424.01, 
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364424.04, 364424.05, 364424.1, 


Fi I e Segment : EngPI ; EPI ; 

DWI a ass: X22; Q12; Q13; Q17; C52 

IVfenual codes (EPI/S-X): X22-A03A1; X22- Q X22- M 

Equivalent Al ert i Abst ract ...signal r epr esent at i ve of a condition to 
be controiied deternlned by t hie first control t o t he second control 
devi ce over t he conmini cat 1 on pat h. . . 

...judges, on the basis of the thus calculated first controlled parameter, 
whether or not the second control device has to operate in cooperation 
with the first control, and produces an output signal to... 

...parameter in response t o t he output signal produced by the first 
control. The first and second adjusting device control the first and 
second controlled parameters associated therewth si mil t aneousi y in 
synchroni sm and in accordance... 

. . . USE - Esp. vu t h a vehi cl e pr ovi ded wi t h at I east t wo corrput er s . 
(ATF i n week 9502/ Repri nt ed in week 9515) 

Q- i gi nai Pubi i cat i on Dat a by Aut hor i t y 

Argent i na 

Assi qnee name & address: 
Qiginal Abstracts: 

. . . i gni t i on 1 1 ni ng in cooper at 1 on ™ t h a knock det ect or cont r ol I er ( Fi gur e 
49), and upon detection of abnorrmi data received from sensors display 
a warning of the abnorrmi ity , and 1 n t he event of seriously 
abnorrmi data being detected transrrits a pseudo si gnai to ensure 
that the vehicle keeps running... 

...detector controller (FIG 49), and upon detection of abnormal data 
received from sensors display a warning of the abnormality, and 1 n t he 
event of seriousiy abnormal data being detected transnits a pseudo signal 
to ensure that the vehicle keeps running. 
Qairrs: Basic Derwent Wfeek: 199038 
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SYSTEM AND r^HOD FOR VI SUALI Zl NG USER ACTI VI TY 

SYSTEr/E ET PRCX:EDE DE VI SUALI SATI CN DE L' ACTI VI TE Df UN JTI LI SATEUR 

Patent Appli cant / 1 nvent or : 
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Desi gnat ed St at es: 

(Protection type Is "patent" unless otherwise stated - for applications 
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AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ 
EC EE ES FI GB GD GE GH GM HR HU I D I L I N I S JP KE KG KP KR KZ LC LK LR 
LS LT LU LV M^ IVD M3 M< MM MW IVK MZ Nl NO NZ CM PG PH PL PT RO RU SC SD 
SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW 
( EP) AT BE BG CH CY GZ DE DK EE ES FI FR GB GR HU I E I T LU M3 NL PT RO SE 
SI SK TR 

( Q^) BP BJ CF CG CI CM G(\ GN GO OA/ M. IVR NE SN TD TG 

( AP) GH GM KE LS MiA/ 1\^ SD SL SZ TZ UG ZM ZW 

( EA) AM AZ BY KG KZ N/D RU TJ TM 
Publ 1 cat i on Language: Engl 1 sh 
Fi I i ng Language: Engl i sh 
Ful I text Wbrd Count: 11185 

Ful 1 1 ext Aval I abi I 1 1 y: 
Det al I ed Descr i pt 1 on 
Q al me 

Det al I ed Descr 1 pt 1 on 

anal ysi s r equi r ed f or a gi ven appi 1 cat 1 on, t he Log Anal yzer may 
include or have access to nurrerous data storage devices, as needed, in 
order to process such Log Data. 

Further, the Log Analyzer is in cormuni cat i on with a Filter, an 
AnormI y QjI lector, a Notifier , and a Video Reporter. The function of 
each of these corrponents are described in greater detail below. 
MDre specifically, the Log Analyzer obtains analysis requests from 
either the Filter and/ or the Anomaly Collector. These requests direct 
the Log Analyzer as to which Log Data to obtain and for which 
patterns, events, or any other items of information the... 

...performs those searching and filtering functions directed to it by the 
Filter and/ or the Anomaly Collector. 

Additionally, \Mien a request is received (from either the Filter or the 
Anomaly Collector), the Log Analyzer suitably obtains a relevant 
port 1 on of t he I 1 St 1 ngs of a user' s act 1 vi 1 1 es f rom t he. . . 

a al m 

... Wfeb Si t e. 

1 1 , wher el n the Wfeb Si t e f ur t her corrpr 1 ses at I east 

6 The system of claimi, wherein the result of the analysis indicates... 

...of at least one user's utilization 
of at least one Wfeb Site, conprising: 

a log analyzer which receives and analyzes a log data file based 
upon at I east one 


cr i t er i a; 

at least one of a f i 1 1 er and an anorral y collector, i n conmini cat i on 
wl t h t he I og 

anal yzer , whi ch pr ovi de t he at I east one cr i t er i a t o t he I og 
anal yzer ; 

a vi deo r epor t er , In conminl cat I on wl t h t he I og anal yzer , whI ch 
receives an output from the log analyzer and creates a M)vl e, the 
IVbvi 8 providing a recreation of at 
I east one user ' s. . . 

.of clalm16, wherein the syst em f urt her conprlses a not I f I er \«hl ch 
provides an e- mal I notification to the provider vMen a trigger event 
occurs. 

18 The syst em of cl al m 13, \Mier el n t he syst em f urt her conprlses at least 
one data storage device , connected t o t he video reporter, for storing 
at least one hdvI e created by the video... 
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Patent and Priority Information (Country, Nunber, Date): 
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(Protection type is "patent" unless otherwise stated - for applications 
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AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ 
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LS LT LU LV M^ IVD M3 M< MM MA/ IVK MZ Nl NO NZ CM PG PH PL PT RO RU SC SD 
SE SG SK SL SY TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM ZW 
(BP) AT BE BG CH CY GZ DE DK EE ES Fl FR GB GR HU I E I T LU M3 NL PT RO SE 
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Pubi i cat i on Language: Engl I sh 
Fl I I ng Language: Engl I sh 
Ful I text Wbrd Cbunt : 19127 

Ful I text Aval I abl I I ty: 
Det al I ed Descr I pt I on 

Det al I ed Descr I pt I on 

dat a t o det er ni ne a t hr eat I evel associ at ed wl t h an event . The 
processor can use the second Interface unit to transnit event data to 
the conput i ng device hosting the management module. 
A second appar at us. . . 

... conput i ng device including a processor and n^mDry. The conput i ng device 
can further conprlse first and second Interface units . The conput I ng 
device can ftlrther conprlse a bus for coupling the processor, n^mory, 
and first and second Interface units to per nit comrunl cat I on between 
such elements. The memory stores a management module. The management 


6 

rTDdul e can conprise an event storage module, a threat level 

det erni nat i on module, a reporting nodule and a user interface ncdui e. The 

processor executes the... 

...processor executes the threat level det erni nat i on module to crenerate 
threat level data based on the event data . I\^re specifically, the 
processor can execute the threat level det er rri nat i on module to generate 
source and destination atonic threat level data for an event, and 
f requency. . . 

. . . modul e t o t r ansni t t he t hr eat r eport t o a user i nt erf ace uni t vi a t he 
bus and second interface unit . In addition, the processor can execute 
the user interface module to provide a visual and/ or audio presentation 
of the event data, threat level data, and/ or any alert dat a gener at ed 
by the processor. The processor can execute the user interface module to 
t r ansni t t he present at 1 on to a user 1 nt erf ace uni t vi a t he bus and 
second interface unit to generate a visual and/ or audio presentation 
for a network security administrator or other... 

. . . St or age devi ce. 

The first method of the invention conprises receiving network event data 
from at least one sensor , normalizing the event data into a uniform 
format, and storing the normalized event data in. ..ray tube (CRT), 
projection system and/ or other device for generating a di spl ay based on 
event data , threat level data and/ or alert data generated by a 
conput i ng device. In addition to the display unit, or as an alternative 
thereto, the user interface... 

...other sonic device for generating sound based on event data, threat 
level data and/or alert data. Furt hernnre, the user interface unit can 
also output event data, threat level data and/ or alert data in any 
human or machine perceptible form 

"I' I at form" is synonomous with "operating system.. 
...or other device. In some instances, "processor" refers to a software 
module executed by a conput i ng device to process data, such as the 
event data processor, event module management processor, threat 
level processor, reports processor, and interface processor. 

"Rule" is conput er instruction, logic and/ or data that operates on threat 
I evel dat a to det er ni ne vJnet her al ert dat a is to be gener at ed to 
indicate that an attack is underway or has occurred... 

...end of a word means "one or mre." For exanpl e, " r esour ce( s) " 
means "one or rrore resources." 

" Terrii nal " can be a conput i ng device, work station, or a terninal ™th 
no or I 1 ni t ed dat a. . . 

...application of the rule(s) 41 t o t he threat level data 40 can produce an 
alert to notify a user such as a network security adni ni st r at or of 
the occurrence of a possible security... 

...presentation 45 that includes the event data 38, the threat level data 
40, and any alert data 42 generated by such conput i ng device. The 
threat report 44 and/ or threat presentation 45 is transmitted t o t he user 
interface unit 16, or rrore specifically a terrrinal unit 17 thereof, 
to generate a presentation thereof A user can view the report 44 and... 

... an audi o pr esent at 1 on to det er ni ne whet her a secur 1 1 y t hr eat has 


20 

threat report 44 and/ or presentation 45 lists the threat level data 
associated with respective event data 38 so that the user will be 
able to deter rri ne the degree of danger posed by an event. Thus, the 
user is able to distinguish and prioritize serious threats from those 
that are less significant. For threats occurring si mil t aneousi y, this 
feature makes it possible... 
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SK SL TJ TM TN TR TT TZ UA UG UZ VN YU ZA ZM ZW 

( EP) AT BE BG CH CY GZ DE DK EE ES FI FR GB GR I E I T LU M3 NL PT SE SK TR 
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Det al I ed Descr I pt I on 

Det al I ed Descr I pt I on 

t he cal I In encrypt ed 
mode within a VPSTN, generate email, pager, console messaging and 
SM\/P notifications , and i og the event. It Is understood that the 
-5 actions, threat assesstrents , and tracking functions described 
herein as performed by the PBX 24 are expanded upon In accordance 
with PBX 24 capabilities. Different conbl nat I ons of TI\^C device 
171 2- per formed actions and PBX 24- per f or med actions are 
cont enpl at ed, such that all or onl y. .. modem cal I s for policy enforcement, 
cont ent moni tori ng, 

and causes t he cal I to be terninated, generates ai ert 

notifications , and logs call events, pursuant to a security 
policy. Accordingly, all previously described operations and... 
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Det al I ed Descr I pt I on 
Publ I cat I on Year : 2002 

Det al I ed Descr I pt I on 

enpl oyed In conjunction with one another. Activity logging tools track 
the activity of one or more corrputers and transcribe observed system 
3o act i vl t y to a ser I es of I og f I I es as I ndl vi dual ent r 1 es. Audi 1 1 ng 
tools typically exarri ne those log entries to discern breaches, 
attacks, or other potentially threatening activity, occurring either 
across machines or within individual machines. 

Both types of security systems provide. ..of the Invention provides a 
net hod of mal nt al ni ng a 

networked conput er syst em I ncl udl ng first and second nodes and an 
event processing server, conprlsing the first and second nodes 
detecting changes In state, the event processing server receiving 
notification of the changes In state from the first and second nodes 
, the event processing server correlating changes In state detected In 
the first and second nodes... 
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conpi i ance rronitoring procedures; (2) use Ti vol i or other software 

toois to support HDnitoring and to search system logs for 

suspicious patterns; (3) checit the respect of the security policy; (4) 
notice any abnorrral event and 

any intrusion attenpts, These additional practices may be included in 

standard administration procedures... 
...0 disable rep and use ftp to back up certain data; (4) make use of 

warning message in every services and application accessed by the users; 

and ( ...above may be made from the 

basic features of this invention. In addition, there are rrany 
different types 

of corrputer systems, and conputer soft\Aare and hardware, and security 
tools that may be utilized in practicing... 
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r equi r ed f or a gi ven appi 1 cat 1 on, t he Log Anal yzer 708 may i ncl ude or 
have access to nurrerous data storage devices , as needed, in order to 
process such Log Data. 


Further, as shown in Figure 7, the Log Analyzer 708 is in 
conmini cat i on with a Filter 710, an Anomaly Cbi lector 712, a Not I f I er 
720, and a Video Reporter 716. The function of each of these conponents 
are described in greater detail below. 

I\^re specifically, the Log Analyzer 708 obtains analysis requests 
from either the Filter 710 and/ or the AnormI y Ctol lector 712. These 
requests direct the Log Analyzer 708 as to which Log Data 706 to 
obtain and for which patterns, events, or any other items of information 


...those searching and filtering functions directed to it by the Filter 710 
and/ or the Anomaly Oai lector 712. 

Additionally, wlien a request is received (from either the Filter 710 or 
the Anomaly Cbi lector 712), the Log Analyzer 708 suitably obtains a 
r el evant por t i on of t he I 1 st 1 ngs of a user ' s act 1 vi 1 1 es f r om . . 

a ai m 

... Wfeb Si t e. 

5 The syst em of cl ai m 1 , wher el n the Wfeb Si t e f ur t her conpr 1 ses at I east 
one devi ce. 

6 The syst em of claimi, wherein the result of the analysis indicates... 

... t he Mjvi e. 
19 

. /\syst eni or gener at 1 ngaMDvi epr ovi di ngar ecr eat 1 onof at I east oneuser ' s 
ut 1 11 zat 1 on of at I east one W&b Si t e, conpr 1 si ng: 

a log analyzer vJnich receives and analyzes a log data file based 
upon at I east one 
cr 1 t er 1 a; 

at least one of a f 1 1 1 er and an anomaly collector, 1 n comruni cat 1 on 
wi t h t he I og 

anal yzer , vJr\\ ch pr ovi de t he at I east one cr 1 1 er 1 a t o t he I og 
anal yzer ; 

a vi deo r eport er , 1 n comruni cat 1 on vu t h t he log analyzer , which 
r ecei ves an 

output from the log analyzer and creates a MdvI e, the MdvI e providing a 
recreation of at least one user... 

...of claim16, \Mierein the syst em f urt her conprises a not 1 f 1 er which 
provides an e-mail notification to the provider when a trigger event 
occurs. 

18 The syst em of cl ai m 13, \Mierein the syst em f urt her conprises at least 
one data storage device , connected t o t he video reporter, for storing 
at least one movie created 
by t he vi deo. . . 

...a provider may request a search for at least one movie stored in the at 
least one data storage device . 

20 A syst em f or gener at i ng I og dat a ut i I i zed t o gener at e a M>v\ e 
depi ct 1 ng a 
r ecr eat 1 on. . . 
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n can be monitored for intrusions. 
The Sensor may also monitors all I oqs on t he web servers in a cluster 
and detects an unusual increase 1 n t he er rors 1 n t he I og , unusual 
t r af f 1 c pat t er ns, 1 ncr ease in t r af f 1 c f r om a si ngl e sour ce or any ot her 
unusual act 1 vi t y in t he I og f i I es. 

This serves as any early warning system for possible "Denial of Service 
Attacks." Unusual activity on one server, if detected ear I y. .. Sensor s can 
be developed to monitor configuration changes of any application used in 
the industry. MjI t i pi e sensors may monitor a syst em because each 
sensor monitors a different aspect. For exanpl e the Firewall sensor, the 
Password Sensor and the Qserating Syst em I nt egr 1 t y sensor may monitor a 
firewall server. Several different sensors monitoring a si ngl e 
syst em hel p to create a more conplete picture of the configuration. Today 

..the syst em caused a secur 1 t y 1 nci dent . The pr esent 1 nvent 1 on hel ps 
reduce careless configuration errors by alerting security staff of all 
changes that occur on a syst em and applications running on that system 

The forensics and audit trail features provide security forensics 
experts the capability to analyze data after an abnorrral incident has 
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I og f 1 I e 119 are provided by the log daemon software 127 to the first 
and second audit conputers 116A, 116Bover links 115Q 115D. The 
application log conput er 117 stores log... 

. . . audi t conput er 1 1 6A r uns I og anal ysi s sof t war e 138A on ent r i es in t he 
collated log file 136Ato search for inconsistencies in data 
entries originating from the door control conput er 112 and the server 
conput er 114... 

. . . 137A. Dat a pr ovi ded over I 1 nks I I 5D, I I 5E ar e col I at ed by t he 
second audit conrputer I I 6B and stored 1 n t he col I at ed i og file 
136B. Log analysis software 138B anai yses entries in t hecol I at ed i og 
file136Bto search for inconsistencies 1 n dat a ent r 1 es ar 1 si ng f rom 
the door control conput er 112, the server conput er 114 and... 

. . . conput er 136A exani nes dat a ent r 1 es ar 1 si ng f r om t he I og f 1 I es 124 and 
130, and the second audit corrputer 136B examines data entries arising 
f rom t he I og f 1 I es 124, 130 and 121 . The syst em 100 t her ef or e f aci I 1 t at es 
the raising of aiarrrs on the basis of exani nat 1 on of different sets of 
information. Furthermore, the bandwidth requirement of... 
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trace problems and security breaches 
I n a net wor k or I T syst em By I oggi ng event s f r om nrul t i pi e devi ces an 
operator can trace the events leading up to a problem and deter nine the 
0 cause of the problem Logs can be used In prevention as wel I as I n 
r eact I on 

to a threat . There are two methods to I npl en^nt logging, centralized 
and 

dl St r I but ed. 

Cent ral I zed Event Loggi ng i s used. . . 

. . . pr I vl I eges. Cent r al I zed event I ogs provl de a cent r al i zed col I ect I on 
point for security events, error reports, system alerts , 
diagnostic messages, and status messages generated by a system Event 
logs are especially Inportant for... 

. . . al I t he I nf or mat I on can be 

correlated and analyzed more easily. These security events come from 
rrany devices , for exanpl e. Intrusion detection tools, custom 
applications, operating systems, network routers, web/ appi I cat I on 
servers, et c. . . 
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... m 

provl de a 

cent ral 

reposi tory 

f or 

encrypt I on 
and 

aut hent I cat I o 
n ser vl ces 
across 
mil 1 1 pi e 
appi I cat I ons 
and 

corrput i ng 

pi at r or ms. 

Aut hor I zat I on 

Wien a user requests access to network resources, the Authorization 
service deterrrines If the user has the appropriate perni ssl ons and 
either allows or disallows the access. (This... 

...The following are exanpl es of ways to I npl ement Authorization services. 

201 

SUBSTI TLTTE SHEET ( RULE 26) 

Servers , Applications, and Databases - Authorization can occur locally 
on a ser ver to I I n1 t access t o sped f I c. . . 
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for iater r evi ew ar e descr i bed. Based upon t lie i ni t i ai review, 
intrusions can be detected and alerts provided, in t fie foiiowng 
description, for purposes of explanation, numerous specific details are 
set f ort h. . . 

...its ent 1 ret y. 

To a great extent, monitoring of user and process behavior (and detection 
of anomalies in that behavior) can be based on secur 1 t y- r el evant audit 
information. Audited systems produce a huge amount of audit data 
which can be analyzed and interpreted to deterrrine whether security 
breaches are occurring or 

have occurred. Analysis allows an Information Security Of leer ( I SQ to 
recognize suspicious behavior and to respond to the behavior ...a 
potential security threat for a single conput er . This means that a hacker 
may attack two distributed corrputers si nul t aneousi y and the I SO needs 
to be aware that a security threat exists. The I SQ .. conput er . 
Oonf i gurat 1 on tool 

330sendsconf 1 gur at 1 onset t i ngst oanar chi ve340. Audi t agent 31 Ccanr esi deon 
the audit server 120 or can reside on one or rrore corrputers 1 n t he 
network. As described below, audit agent 310 sends native audits t o an on 


.agent 370 sends real time audits to a real time monitor 370 and real 
t\rre alerts to a real time alert monitor 380. Fteal time monitor 380 
can be used to vi ew audi t alerts in near real time, view alerts and 
messages from other tools, view reports and activate other tools. 
l\A)nitors 370 and 380. . . be defined and processed 

periodically. Ad hoc queries can be generated and executed imrEdiateiy. 
An anonal y reporting tool 410 receives normalized audit Information 
from audit analysis database storage device 360 and can forward this 
information to the alert monitor tool 380. The anomaly reporting tool 
can generate alerts in near real time, replay audit scenarios and 
produce summary reports and statistics. An adni ni st r at 1 ve. . . 
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the user profile as determined by the network tools module 302. This 
may be an alert that a misuse night be occurring but because the user 
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